CVE-2024-49247

Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through = 1.6...

CVE-2024-22293

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andrea Tarantini BP Profile Search allows Reflected XSS.This issue affects BP Profile Search: from n/a through 5.5...

CVE-2025-24631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Reflected XSS.This issue affects BP Email Assign Templates: from n/a through = 1.5...

CVE-2025-24631 WordPress BP Email Assign Templates Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Reflected XSS.This issue affects BP Email Assign Templates: from n/a through = 1.5...

CVE-2025-22817

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Venutius BP Profile Shortcodes Extra bp-profile-shortcodes-extra allows Stored XSS.This issue affects BP Profile Shortcodes Extra: from n/a through = 2.6.0...

CVE-2025-22817

CVE-2025-22817 is an authenticated Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin BP Profile Shortcodes Extra. Affected versions are reported as from n/a through 2.6.0. The issue stems from improper neutralization of input during web page generation, enabling stored XSS. ...

CVE-2025-22817 WordPress BP Profile Shortcodes Extra plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Venutius BP Profile Shortcodes Extra bp-profile-shortcodes-extra allows Stored XSS.This issue affects BP Profile Shortcodes Extra: from n/a through = 2.6.0...

WordPress plugin BP Profile Shortcodes Extra 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

Moxa多款产品 安全漏洞

MOXA EDR-810 and others are products of China-based Moxa MOXA.MOXA EDR-810 is a secure router.MOXA EDR-G902 is an industrial security router device.MOXA EDR-8010 is a secure router. A security vulnerability exists in several Moxa products that stems from the use of hard-coded credentials. An...

MOXA多款产品 安全漏洞

MOXA EDR-8010 and others are products of MOXA China.MOXA EDR-8010 is a security router.MOXA EDR-G9004 is a set of highly-integrated industrial multi-port security routers.MOXA EDR-G9010 is a set of highly-integrated industrial multi-port security routers.MOXA EDR-G9004 is a set of highly-integrat...

CVE-2024-12441

The BP Email Assign Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2024-12441 BP Email Assign Templates <= 1.5 - Reflected Cross-Site Scripting

The BP Email Assign Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2024-49634

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rimon Habib BP Member Type Manager allows Reflected XSS.This issue affects BP Member Type Manager: from n/a through 1.01...

CVE-2024-49634

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rimon Habib BP Member Type Manager bp-member-type-manager allows Reflected XSS.This issue affects BP Member Type Manager: from n/a through = 1.01...

CVE-2024-49634 WordPress BP Member Type Manager plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rimon Habib BP Member Type Manager bp-member-type-manager allows Reflected XSS.This issue affects BP Member Type Manager: from n/a through = 1.01...

CVE-2024-49634 WordPress BP Member Type Manager plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rimon Habib BP Member Type Manager bp-member-type-manager allows Reflected XSS.This issue affects BP Member Type Manager: from n/a through = 1.01...

CVE-2024-49634

CVE-2024-49634 describes a Reflected Cross-Site Scripting (XSS) in the WordPress plugin BP Member Type Manager (versions

PYSEC-2024-299

Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...

µD3TN 安全漏洞

µD3TN is a free, lean and space-tested implementation of the DTN protocol for POSIX and microcontrollers from the D3TN open source. A security vulnerability exists in µD3TN version v0.14.0, which stems from a reachable assertion in the BPv7 parser that allows an attacker to interrupt service via ...

The vulnerability of the microprogrammed Ethernet switch software from Moxa series, namely EDR-8010, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, G4302-LTE4, and TN-4900, arises due to the lack of measures taken to neutralize specific components used in the operating system. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the microprogrammed Ethernet switch software from Moxa series, such as EDR-8010, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, G4302-LTE4, and TN-4900, exists due to the lack of measures to neutralize specific components. Exploiting this vulnerability allows a remote attacker ...